CVE-2023-34345: Path Traversal
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrary files, which may lead to information disclosure.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this AMI BMC vulnerability?
The vulnerability ID for this AMI BMC vulnerability is CVE-2023-34345.
What is the title of this vulnerability?
The title of this vulnerability is "AMI BMC contains a vulnerability in the SPX REST API where an attacker with the required privileges …".
What is the severity level of CVE-2023-34345?
The severity level of CVE-2023-34345 is medium.
How does this vulnerability in the SPX REST API of AMI BMC allow an attacker to access arbitrary files?
This vulnerability allows an attacker with the required privileges to access arbitrary files through the SPX REST API of AMI BMC, potentially leading to information disclosure.
How can I fix the AMI BMC vulnerability identified by CVE-2023-34345?
To fix the AMI BMC vulnerability identified by CVE-2023-34345, it is recommended to update to a version higher than 13.5 or apply the necessary security patches provided by the vendor.